openstack-ansible-os_neutron/templates/sudoers.j2
Dmitriy Rabotyagov 65fba08c94 Add support for ovn-bgp-agent deployment
Depends-On: https://review.opendev.org/c/openstack/openstack-ansible/+/909694
Change-Id: Id41c4b98d7e973ee85b77d2588ace3e2ce76490f
2024-03-14 23:24:42 +01:00

14 lines
770 B
Django/Jinja

# {{ ansible_managed }}
Defaults:{{ neutron_system_user_name }} !requiretty
Defaults:{{ neutron_system_user_name }} secure_path="{{ neutron_bin }}:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
{{ neutron_system_user_name }} ALL = (root) NOPASSWD: {{ neutron_bin }}/{{ neutron_service_name }}-rootwrap
{{ neutron_system_user_name }} ALL = (root) NOPASSWD: {{ neutron_bin }}/{{ neutron_service_name }}-rootwrap-daemon
{{ neutron_system_user_name }} ALL = (root) NOPASSWD: {{ neutron_bin }}/privsep-helper
{% if neutron_ovn_bgp_enable | bool %}
{{ neutron_system_user_name }} ALL = (root) NOPASSWD: {{ neutron_bin }}/ovn-bgp-agent-rootwrap
{{ neutron_system_user_name }} ALL = (root) NOPASSWD: {{ neutron_bin }}/ovn-bgp-agent-rootwrap-daemon
{% endif %}